github re-analysis due unconfirmed MCP

PaperDebugger/paperdebugger

github

A Plugin-Based Multi-Agent System for In-Editor Academic Writing, Review, and Editing

maintainer
PaperDebugger
license
AGPL-3.0
first seen
2026-06-01
last seen
2026-06-04
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 968a7ca · analyzer v17 · 2d ago

skills & prompt files 1

code evidence vv2.12.28 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 1

  • fs PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/vite.config.ts :3 import fs from "fs";

network 7

  • net PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/src/background.ts :76 const response = await fetch(url);
  • net PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/src/intermediate.ts :255 const response = await fetch(url);
  • net PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/src/libs/apiclient.ts :1 import axios, { AxiosError, AxiosInstance, AxiosRequestConfig } from "axios";
  • net PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/src/libs/google-analytics.ts :42 await fetch(
  • net PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/src/libs/oauth.ts :90 const res = await fetch(endpoint);
  • net PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/src/libs/overleaf-socket.ts :159 const res = await fetch(`https://${currentDomain}/project/${projectId}/threads`, {
  • net PaperDebugger-paperdebugger-968a7ca/webapp/oauth-landing/src/App.tsx :58 fetch(`/oauth2/callback?access_token=${access_token}&state=${state}`)

secrets 2

  • secrets PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/src/libs/google-analytics.ts :7 const API_SECRET = process.env.PD_GA_API_SECRET;
  • secrets PaperDebugger-paperdebugger-968a7ca/webapp/_webapp/vite.config.ts :29 process.env.GRAFANA_API_KEY ||

declared dependencies 59

  • @buf/googleapis_googleapis.bufbuild_es@^2.2.3-20250211200939-546238c53f73.1
  • @bufbuild/protobuf@^2.5.1
  • @capacitor-community/apple-sign-in@^7.0.1
  • @grafana/faro-web-sdk@^2.0.2
  • @grafana/faro-web-tracing@^2.0.2
  • @heroui/react@^2.7.9
  • @iconify/react@^6.0.0
  • @lukemorales/query-key-factory@^1.3.4
  • @r2wc/react-to-web-component@^2.1.0
  • @streamdown/cjk@^1.0.1
  • @streamdown/code@^1.0.1
  • @streamdown/math@^1.0.1
  • @streamdown/mermaid@^1.0.1
  • @tanstack/react-query@^5.79.0
  • @types/diff@^8.0.0
  • @uidotdev/usehooks@^2.4.1
  • axios@^1.9.0
  • baseline-browser-mapping@^2.9.12
  • caniuse-lite@^1.0.30001762
  • diff@^8.0.2
  • events@^3.3.0
  • framer-motion@^12.15.0
  • highlight.js@^11.11.1
  • immer@^10.1.1
  • jszip@^3.10.1
  • markdown-to-jsx@^7.7.6
  • openai@^5.0.1
  • postcss@^8.5.4
  • react@^19.1.0
  • react-dom@^19.1.0
  • react-rnd@^10.5.2
  • semver@^7.7.2
  • streamdown@^2.1.0
  • uuid@^11.1.0
  • zustand@^5.0.5
  • @codemirror/state@^6.5.2
  • @codemirror/view@^6.37.1
  • @eslint/js@^9.28.0
  • @grafana/faro-rollup-plugin@^0.7.0
  • @types/bun@^1.3.5
  • @types/chrome@^0.0.326
  • @types/codemirror@^5.60.16
  • @types/events@^3.0.3
  • @types/node@^22.15.29
  • @types/react@^19.1.6
  • @types/react-dom@^19.1.5
  • @types/semver@^7.7.0
  • @vitejs/plugin-react-swc@^3.10.0
  • autoprefixer@^10.4.21
  • eslint@^9.28.0
  • eslint-plugin-react-hooks@^5.2.0
  • eslint-plugin-react-refresh@^0.4.20
  • globals@^16.2.0
  • nodemon@^3.1.10
  • prettier@3.5.3
  • tailwindcss@^3.4.17
  • typescript@~5.8.3
  • typescript-eslint@^8.33.0
  • vite@^6.3.5